DDOG · 10-K filed 18 Feb 2026 · year to 31 Dec 2025

Datadog

32 named things its latest annual report says its results depend on, each in the company's own words. 22 of them are also named by other companies we've read.

Read the filing on SEC.gov ↗

Customers

AI-native customer cohort (largest customer)

earns from · approximately seven percentage points of our year-over-year revenue growth for the quarter ended December 31, 2025named as a risk

For example, in prior periods customers in our cloud-native cohort, and more recently larger customers in our AI-native cohort, which cohort includes our largest customer and represented approximately seven percentage points of our year-over-year revenue growth for the quarter ended December 31, 2025, have rapidly increased their usage of our product and then optimized or may in the future optimize their usage or fail to renew their subscriptions.Risk factors (Item 1A)

U.S. government customers

earns fromnamed as a risk

A portion of our sales are to U.S. federal, state, and local, as well as foreign, governmental agency customers, as well as to customers in highly regulated industries such as financial services, telecommunications and healthcare.Risk factors (Item 1A)

Also named by AVGO, HASI, MSFT, SPIR

Suppliers

Third-party cloud hosting providers

depends on · substantially all of the infrastructurenamed as a risk

We outsource substantially all of the infrastructure relating to our cloud solution to third-party hosting services.Risk factors (Item 1A)

Also named by CART, FFIV

Third-party AI services

depends onnamed as a risk

In addition, our business may be disrupted if any of the third-party AI services we use become unavailable due to extended outages or commercially unreasonable terms of service.Risk factors (Item 1A)

Partners and platforms

Cloud provider marketplaces

earns fromnamed as a risk

An increasing number of sales through cloud provider marketplaces could reduce both the number of customers with whom we have direct commercial relationships as well as our profit margins on sales made through such marketplaces.Risk factors (Item 1A)

Other companies

0.00% Convertible Senior Notes due 2029

$1.0 billion aggregate principal amountnamed as a risk

In December 2024, we issued $1.0 billion aggregate principal amount of the 2029 Notes.Market risk (Item 7A)

Competitors

Amazon Web Services (AWS)

competes withnamed as a risk

With respect to cloud monitoring, we compete with native solutions from cloud providers such as AWS, GCP and Microsoft Azure.Risk factors (Item 1A)

Also named by AAON, ABNB, ADSK, AIOT, BLK, CARR, CG, COF and 56 more

Microsoft Azure

competes withnamed as a risk

With respect to cloud monitoring, we compete with native solutions from cloud providers such as AWS, GCP and Microsoft Azure.Risk factors (Item 1A)

Also named by AIOT, AKAM, BLK, DOCN, DOCU, EXTR, FFIV, FTNT and 14 more

Google Cloud Platform (GCP)

competes withnamed as a risk

With respect to cloud monitoring, we compete with native solutions from cloud providers such as AWS, GCP and Microsoft Azure.Risk factors (Item 1A)

Also named by CRWV, DOCN, EXTR, FFIV, INTU, MDB, MELI, OSCR and 5 more

IBM

competes withnamed as a risk

With respect to on-premise infrastructure monitoring, we compete with diversified technology companies and systems management vendors including IBM, Microsoft Corporation, and SolarWinds Corporation.Risk factors (Item 1A)

Also named by IONQ, MDB, P, PTC, QBTS, RBRK

Microsoft Corporation

competes withnamed as a risk

Also named by GTLB, HPQ, PANW, WDAY

Cisco Systems, Inc.

competes withnamed as a risk

With respect to APM, we compete with companies including Cisco Systems, Inc., New Relic, Inc. and Dynatrace Software Inc.Risk factors (Item 1A)

Also named by EXTR, PANW

New Relic, Inc.

competes withnamed as a risk

With respect to APM, we compete with companies including Cisco Systems, Inc., New Relic, Inc. and Dynatrace Software Inc.Risk factors (Item 1A)

Dynatrace Software Inc.

competes withnamed as a risk

With respect to APM, we compete with companies including Cisco Systems, Inc., New Relic, Inc. and Dynatrace Software Inc.Risk factors (Item 1A)

Elastic N.V.

competes withnamed as a risk

With respect to log management, we compete with companies including Cisco Systems, Inc. and Elastic N.V.Risk factors (Item 1A)

SolarWinds Corporation

competes withnamed as a risk

Places

France

operates in · 34% of whom were located in Francenamed as a risk

As of December 31, 2025, approximately 44% of our full-time employees were located outside of the United States, 34% of whom were located in France.Risk factors (Item 1A)

Also named by ATR, BAM, HROW, IDCC, MS, UBER, UGI, WAB and 1 more

International (outside North America)

earns from · 29%named as a risk

Revenue, as determined based on the billing address of our customers, from regions outside of North America was 29% for the year ended December 31, 2025.Risk factors (Item 1A)

Also named by MDB, MSI, OKTA, ROP, SNOW, TWLO

Ireland

operates innamed as a risk

Our operating expenses are denominated in the currencies of the countries in which our operations are located, which are primarily in the United States, France, and Ireland.Market risk (Item 7A)

Also named by AAPL, ACN, ADI, AGX, BEN, CDNS, CELH, COR and 13 more

European Economic Area (EEA) data center

operates innamed as a risk

While we utilize a data center in the EEA to maintain certain customer data (which may include personal information) originating from the EEA, we may find it necessary to establish additional systems and processes to maintain such data in the EEA, which may involve substantial expense and distraction from other aspects of our business.Risk factors (Item 1A)

Hazards

April 2025 source code repository breach

named as a risk

For example, in April 2025, we notified customers of access by an unauthorized third party to a number of Datadog source code repositories arising from compromised employee account credentials.Risk factors (Item 1A)

Regulators

Office of Foreign Assets Control (OFAC)

subject tonamed as a risk

Furthermore, our activities are subject to U.S. economic sanctions laws and regulations administered by the Office of Foreign Assets Control that prohibit the shipment of most products and services to embargoed jurisdictions or sanctioned parties without the required export authorizations.Risk factors (Item 1A)

Also named by ABNB, ADP, AIG, APP, BMI, BMNR, BPOP, CAT and 46 more

Laws and programs

OECD Pillar Two global minimum tax

subject to · 15%named as a risk

The OECD's Pillar Two model rules introduced a global minimum tax of 15%.Risk factors (Item 1A)

Also named by ABNB, ACN, ADI, ADM, ADSK, AKAM, ALB, AMAT and 70 more

EU General Data Protection Regulation (GDPR)

subject tonamed as a risk

Under both the EU GDPR and UK GDPR, companies may face temporary or definitive bans on data processing and other corrective actions, significant monetary fines, and private litigation related to processing of personal data brought by classes of data subjects or consumer protection organizations authorized at law to represent their interests.Risk factors (Item 1A)

Also named by ACN, ADSK, AIG, ALK, AMG, ANET, APG, AXON and 61 more

California Consumer Privacy Act (CCPA)

subject tonamed as a risk

The CCPA provides a private right of action and statutory damages for certain data breaches and may increase our compliance costs and potential liability with respect to other personal information we collect about California residents.Risk factors (Item 1A)

Also named by AAP, AIOT, AKAM, ALL, APP, AYI, BAC, BBSI and 69 more

U.S. Export Administration Regulations

subject tonamed as a risk

Our platform and products are subject to U.S. export controls, including the Export Administration Regulations, and we incorporate encryption technology into certain of our products.Risk factors (Item 1A)

Also named by ADI, ALAB, AMD, APP, ARW, AVGO, CARR, CDRE and 40 more

EU Artificial Intelligence Act

subject tonamed as a risk

For example, the European Union's Artificial Intelligence Act, which would apply beyond the European Union’s borders, came into effect in August 2024.Risk factors (Item 1A)

Also named by ABNB, ADP, AIOT, AKAM, ALAB, AMG, APP, AVAV and 24 more

EU-U.S. Data Privacy Framework

subject tonamed as a risk

Although there are currently various mechanisms that may be used to transfer personal data from the EEA and United Kingdom to the United States in compliance with law, such as the EEA standard contractual clauses, the United Kingdom’s International Data Transfer Agreement/Addendum, and the EU-U.S. Data Privacy Framework and the United Kingdom extension thereto (which allows for transfers for relevant U.S.-based organizations who self-certify compliance and participate in the Framework), these mechanisms are subject to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal data to the United States.Risk factors (Item 1A)

Also named by ADBE, APP, CRM, CRWD, DOCN, GTLB, IDXX, INTU and 12 more

EU Data Act

subject tonamed as a risk

Additionally, the EU Data Act introduces new obligations related to data portability and services switching, which introduces operational complexities and infrastructure, and may increase our compliance and operational costs.Risk factors (Item 1A)

Also named by ADBE, CSGP, IOT, KVYO, MSFT, NET, NOW, PLTR and 6 more

EU Digital Operational Resilience Act (DORA)

subject tonamed as a risk

Some of our customers may be subject to the EU’s Digital Operational Resilience Act (DORA) and similar regulatory requirements in the United Kingdom related to operational resilience, which has led and will lead certain of our customers to negotiate additional specific provisions with us, including certain mandatory risk management, transparency and continuity provisions.Risk factors (Item 1A)

Also named by BKNG, BLK, CRM, CRWD, EQIX, FDS, MCO, MDB and 3 more

EU NIS2 Directive

subject tonamed as a risk

For example, in the European Union, the Network and Information Security Directive (EU) 2022/2555 (“NIS2”), and in the United Kingdom, the Network and Information Systems Regulations 2018, establish requirements related to risk management, security incident reporting, and business continuity for certain entities.Risk factors (Item 1A)

Also named by CGNX, GDDY, MDB, SNOW

FedRAMP

subject to

In addition, certain Datadog products are subject to specific compliance requirements and standards, including, as applicable, ISO 27001, SOC 2, PCI, and FedRAMP (Moderate), and are tested and evaluated by third-party auditors against those applicable compliance requirements and standards.Cybersecurity (Item 1C)

Also named by ADSK, CRWD, DOCU, FTNT, GTLB, MSTR, NET, OKTA and 9 more